NVIDIA gives humanoids a safety processor that the AI cannot override — Agility is first in line

NVIDIA announced Halos for Robotics on 22 June 2026, a full-stack safety architecture aimed squarely at the reason humanoid robots still work behind fences: nobody can certify a neural network as the thing that stops a machine before it hits a person. Halos separates the two jobs. The hardware layer is the industrial IGX Thor compute module, which carries a functional-safety island — an isolated processor, assessed against IEC 61508, that can halt the robot independently of the AI stack doing perception and planning. Above it sit Halos Core and Halos OS, plus an "outside-in" blueprint in which cameras mounted in the building, rather than on the robot, feed AI agents that see around corners and modulate the robot's speed as people approach. NVIDIA says the architecture is derived from its automotive safety work, and it has paired the launch with an ANAB-accredited inspection lab and certification partners including TÜV Rheinland, UL Solutions, TÜV SÜD, exida, SGS and CertX. Supported standards named at launch include IEC 61508, ISO 13849 and ISO/IEC TR 5469. Agility Robotics is the first production user, integrating IGX Thor and Halos Core into Digit — the humanoid already working for Amazon, GXO, Schaeffler and Toyota Motor Manufacturing Canada. It is the foundation of what Agility calls "cooperative safety" in the forthcoming Digit v5: sharing unmodified floor space with workers, no safety cage. The telling detail is the guest list. Six certification bodies and an accredited lab say plainly what the bottleneck for humanoids on a factory floor actually is — not autonomy, not dexterity, but a signature from a certifier.